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REMARKS 

Claims 1-3, 5-7 and 9-20 were pending in this application before submission of this 
paper. No claim amendments are made. Accordingly, Claims 1-3, 5-7 and 9-20 remain pending. 
Reconsideration of all pending claims is respectfully requested in view of the following remarks. 

Claims 1 -4 

Claims 1-4 stand rejected under 35 U.S.C. § 103(a) as being unpatentable over U.S. Pat. 
No. 5,469,559 issued to Clifton in view of US. Pat. No. 6,571,278 issued to Negishi and U.S. 
Pat. No- 6,339,423 issued to Sampson, Applicants respectfully traverse. 

Claim 1 recites, "determining whether the first computing machine is within the owner 
domain by retrieving from the security descriptor the identity of the owner domain . . . Thus, a 
computer-readable medium according to Claim 1 has instructions at least related to: (1) an owner 
domain and (2) retrieving from the security descriptor the identity of the owner domain . 

Column 3, line 54 to column 4 line 8 of Clifton is cited as teaching this feature. As 
described below, Applicants respectfully assert that the cited portion of Clifton does not teach or 
suggest an owner domain, and further, does not teach or suggest retrieving from the security 
descriptor the identity of the owner domain. 

The cited portion of Clifton appears to equate Clifton 's resources to objects as recited in 
Claim 1 . However, Applicants could find no teaching or suggestion that a resource in Clifton 
could have an owner and/or that the owner could have a domain. Rather, Clifton discloses, "all 
resources ... arc assigned a privilege level in addition to a classification level by use of 
descriptors" (col. 3, lines 9-14). Because Clifton does not teach an owner and/or that an owner 
can have a domain, does not teach or suggest an "owner domain" as recited in Claim 1 . 

Still further, Clifton fails to teach or suggest the feature "retrieving from the security 
descriptor the identity of the owner domain." As previously described, Clifton does not teach or 
suggest that a resource can have an owner and, thus, cannot teach or suggest an "owner domain." 
In addition, Clifton discloses, "all resources needed to perform specific functions are organized 
into a domain which corresponds to a privilege level. Information identifying the domain to 
which a resource belongs is included in the descriptor" (col. 3, lines 18-22). That is, the 
descriptor contains the resource's domain - not the owner's domain. Applicants respectfully 
assert that a resource's domain is not equivalent to an owner domain. Stated another way, the 
descriptor disclosed by Clifton does not identify the domain to which an owner of a resource 
belongs - rather it identifies a domain to which a resource belongs. 
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The cited disclosures of Negishi and Sampson do not overcome the deficiencies of Clifton 
with respect to "owner domain" and "retrieving from the security descriptor the identity of the 
owner domain" as recited in Claim 1. Consequently, the cited references do not teach or suggest 
each element of Claim 1. Accordingly, Claim 1 and dependent Claims 2 and 3 are allowable 
over the cited references. 

Claim 5 

Claim 5 stands rejected as being unpatentable over Clifton in view of Negishi and further 
in view of Sampson and U.S. Pat. No. 6,295,605 issued to Dockter. Applicants respectfully 
traverse. Claim 5 depends from Claim 1. Dockter is cited as disclosing a feature related to a 
performing a special security evaluation if a field indicates it should be performed. This 
disclosure of Dockter does not overcome the deficiencies of Clifton, Negishi and Sampson as 
described above with regard to parent Claim 1. Therefore, Claim 1 and dependent Claim 5 are 
patentable over the cited references. 

Claim jj 

Claim 6 stands rejected as being unpatentable over Clifton in view of Negishi and further 
in view of Sampson^ Dockter, and U.S. Pat. No. 6,295,605 issued to GoertzeL Applicants 
respectfully traverse. Claim 6 depends from Claim 5. Goertzel is cited as disclosing a feature 
related to a second computing device evaluating whether a requestor is authorized to modify an 
object. This disclosure of Goertzel does not overcome the deficiencies of Clifton, Negishi, 
Sampson and Dockter as described above with regard to parent Claim 1 . Therefore, Claim 5 and 
dependent Claim 6 are patentable over the cited references. 

Claims 7, and 9-12 

Claims 7, and 9-12 stand rejected as being unpatentable over Clifton in view of Goertzel 
and further in view of Negishi mi Dockter. Note, Claim 8 was canceled in the Amendment of 
July 22, 2004. Applicants respectfully traverse. 

Claim 7 recites in part, 64 the object having an associated security descriptor identifying an 
owner for the object . Thus, a computer-implemented method according to Claim 7 at least 
uses a security descriptor identifying the owner domain . As previously described, Clifton does 
not disclose an owner domain and, further, discloses a descriptor that includes information to 
identify the domain of a resource (i.e., the domain to which a resource belongs is not equivalent 
to the owner domain). Thus, Clifton does not teach or suggest a security descriptor as recited in 
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Claim 7. Also as previously described, the cited portions of Goertzel, Negiski and Dodder do 
not overcome these deficiencies of Clifton. Therefore, Claim 7 and dependent Claims 9- 
Claims 13 and 20 

Claims 13 and 20 stand rejected as being unpatentable over Sampson in view of Negishi 
and further in view of Clifton. Applicants respectfully traverse. 

Claim 13 recites in part, <c to retrieve from the object the owner domain identifier, to 
compare the owner domain identifier with an identifier of a domain from which the request 
originated." 

Clifton is cited as disclosing security access rights including an owner domain identifier. 
As previously described, Clifton and the other cited references do not teach or suggest an owner 
domain. As previously described, Clifton discloses that a resource includes a descriptor that 
contains the resource's domain — not the owner's domain. A resource's domain is not equivalent 
to an owner domain. Therefore, Claim 13 includes at least one element that is not taught nor 
suggested by any of the cited references. Thus, Claim 13 and dependent Claim 20 are allowable 
over the cited references. 

Claims 14 and 15 

Claims 14 and 15 stand rejected as being unpatentable over Sampson in view of Negishi 
and further in view of Clifton, and further in view of U.S. Pat. No. 6,453,354 issued to Jiang, and 
further in view of U.S. Pat. No. 6,226,752 issued to Gupta. Applicants respectfully traverse. 

Claims 14 and 15 are dependent from Claim 13, and the Office Action applies Sampson- 
Negishi-Clifton as teaching parent Claim 13 as previously described. Jiang is then cited as 
disclosing, "access request to file system is forwarded to owner of the file if the request is not 
received by the owner of the file system" and "the first system forwards the request to another 
file system if it's not the owner of the requesting file." Gupta is cited as disclosing, '^redirecting 
the requestor to another system." Applicants respectfully assert that the cited disclosures of 
Jiang and/or Gupta do not overcome the deficiencies of Sampson-Negishi-Clifton with regard to 
"owner domain" and retrieving an "owner domain identifier" from an object as recited in parent 
Claim 13. Therefore, parent Claim 13 and dependent Claims 14 and 15 are patentable over the 
cited references. 

Claim 16 

Claim 1 6 stands rejected as being unpatentable over Sampson in view of Negishi and 
further in view of Clifton and Goertzel. Applicants respectfully traverse. 
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Claim 16 is dependent from Claim 13, and the Office Action applies Sampson-Negishi- 
Clifton as teaching parent Claim 13 as previously described. Goertzel is then cited as disclosing, 
"to determine whether the request to modify the object originated within a particular domain of 
the plurality of domains, and if so, then to perform a standard security evaluation of the request 
. . .". Applicants respectfully assert that the cited disclosure of Goertzel does not overcome the 
deficiencies of Sampson-Negishi-CHfion with regard to "owner domain* 7 and retrieving an 
"owner domain identifier" from an object as recited in parent Claim 13. Therefore, parent 
Claim 13 and dependent Claim 16 are patentable over the cited references. 

niaim 17 

Claim 17 stands rejected as being unpatentable over Sampson in view of Negishi and 
further in view of Clifton, Goertzel, and U.S. Pat. No. 5,805,820 issued to Bellovin. Applicants 
respectfully traverse. 

Claim 17 is dependent from Claim 16, and the Office Action applies Sampson-Negishi- 
Clifton-Goertzel as teaching parent Claim 16 as previously described. Bellovin is then cited as 
disclosing, "the particular domain is a root domain of the shared data structure 7 '. Applicants 
respectfully assert that the cited disclosure of Bellovin does not overcome the deficiencies of 
Sampson-Negishi-Clifton-Goertzel with regard to "owner domain'* and retrieving an "owner 
domain identifier 57 from an object as recited in parent Claim 16 (via Claim 13). Therefore, parent 
Claim 16 and dependent Claim 17 are patentable over the cited references. 

Claim 18 

Claim 18 stands rejected as being unpatentable over Sampson in view of Negishi and 
fhrther in view of Clifton and U.S. Pat. No. 6,243,815 issued to Anlur. Applicants respectfully 
traverse. 

Claim 18 is dependent from Claim 13, and the Office Action applies Sampson-Negishi- 
Clifton as teaching parent Claim 13 as previously described in the rejection of Claim 13. Amur 
is then cited as disclosing, fc the shared data structure comprises a directory service and wherein 
the at least one data store comprises configuration data associated with the directory service." 
Applicants respectfully assert that the cited disclosure otAntur does not overcome the 
deficiencies of Sampson-Negishi-Clifion with regard to "owner domain" and retrieving an 
"owner domain identifier" from an object as recited in parent Claim 13. Therefore, parent 
Claim 1 3 and dependent Claim 18 are patentable over the cited references. 
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Claim 19 

Claim 19 stands rejected as being unpatentable over Sampson in view of Negishi and 
further in view of Clifton and U.S. Pat. No. 6,466,980 issued to Lumelsky. Applicants 
respectfully traverse. 

Claim 19 is dependent from Claim 1 3, and the Office Action applies Sampson-Negishi- 
Clifton as teaching parent Claim 13 as previously described in the rejection of Claim 13. 
Lumelsky is then cited as disclosing, ££ the shared data structure comprises a directory service and 
wherein the at least one data store comprises schema data associated with the directory service". 
Applicants respectfully assert, that the cited disclosure of Lumelsky does not overcome the 
deficiencies of Sampson-Negishi-CUfton with regard to "owner domain" and retrieving an 
"owner domain identifier" from an object as recited in parent Claim 13. Therefore, parent 
Claim 13 and dependent Claim 1 9 are patentable over the cited references. 

In view of the above remarks, Applicants respectfully request a Notice of Allowance. If 
the Examiner believes a telephone conference would advance the prosecution of this application, 
the Examiner is invited to telephone the undersigned at the below-listed telephone number. 



Respectfully submitted, 



MERCHANT & GOULD P.C. 




Lawrence E, Lyrfke 
Registration No. 38540 
Direct Dial: 206.342.6215 



MERCHANT & GOULD P.C. 
P. O. Box 2903 

Minneapolis, Minnesota 55402-0903 
206.342.6200 



27488 
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